Training : Managing and securing a portfolio of domain names – Key Accounts

Day 1 – Objectives and governance of domain name management in an organisation

Morning 1 – Introduction: objectives of a domain names policy and stakes involved

• Definition of a domain name
• Security and risks to the information system
• The various objectives that can be attained
• The scope of a domain names policy
• The organisation’s internal rules for managing a portfolio of domain names
• The various actors involved
• Adapting the management of a portfolio of domain names to the organisation of the business
  • The role of a Domain Name Correspondent
  • Domain names management committee
  • In-house distribution of rules and standards
• Practical exercises

Afternoon 1: organisation and management of domain names and internal governance

• Internal aspects of organisation and governance
  • Applicants for domain names
  • Work flows and checks on compliance of requests
  • Reporting: structuring the portfolio so as to be able to sort information for reporting depending on recipient
  • Monitoring tools and software
  • Internal support
  • Roles and responsibilities of each participant in this type of project
  • Practical exercises
• External aspects of organisation and governance
  • Interactions with registrars
  • Interactions with registries
  • Interactions with other actors
• Practical case based on the launch of a new brand

Day 2 – Protecting your domain names, keeping watch on those filed by third parties and managing disputes

Morning 2: protecting domain names

• Implementing a protection strategy for your domain names
• Defining a naming scope (list of domain names to be filed)
• Organising your portfolio of domain names:
  • Creating brand families
  • The various areas of protection
• The elements that need to be positioned
  • Brand and domain name life cycle
  • The WHOIS
• Securing critical domain names and security mechanisms to implement in order to counter attacks
• The recommendations of ANSSI (National Agency for the Security of Information Systems) for domain name security: how to adopt an in-depth defence approach and improve the security score

Afternoon 2: Surveillance of domain names and management of disputes

• Surveillance and detection of disputes
  • The notion of detection and what to expect
  • Frequency of surveillance
  • The notion of depth of surveillance (TLD, associated key word, similarities, phonetic and visual variants of a domain name)
  • Analysis of surveillance reports
• Management of difficulties linked to contentious situations detected
  • The various incidents
  • When to take action
  • The decision grid and the time when action is taken

Conclusion: Internal sharing of a domain names policy